Query Timeline Chart

The Query Timeline supports single and multiple queries, displaying the number of results as a trend line over the selected date range.

To configure a Query Timeline chart:

1. Give a title to your chart.

2. Select the chart mode:

   • Comparison - Compare up to six queries. Queries may be existing queries or new ones. Learn more about creating a query.
   • Intersection - Intersect a base query and one additional query that intersects with it. When selected, all queries must be from the same asset module, e.g. Users, Devices, Software or Vulnerabilites. Once the asset module is selected for the first query, the module selection list for subsequent queries is automatically matched to the first query.

3. Select an asset module and query for up to 6 queries that can be included in the comparison.

4. Select an aggregation time period: Day, Week, or Month. Query results for weekly and monthly time periods are aggregated based on the average values for the selected time period. Each data point for weekly aggregation is the average of all daily values since the last weekly period. And each data point for the monthly aggregation is the average of all daily values since the last monthly period. The legend reflects the time period selected.

   Note:

   On the daily aggregation chart, you can click through to the asset list.

5. Specify the number of last days or a date range to be included in the timeline chart. This date range is displayed on the chart that is created.

   As you configure the chart, a preview is created in the left pane.

6. In the Y-axis settings section, do the following:

   • To set a minimum value, toggle Axis miminum and enter a value in the text box.
   • To set a maximum value, toggle Axis maximum and enter a value in the text box.

   Learn more about setting the y-axis values.

7. Click Save.

   • Once the chart is created, mouse-over data points to see information about them.
   • Click on any data point to open the chart in the relevant assets page (depending on the module you chose).

To export the query timeline to a matrix of date and values in a CSV file, select Export to CSV from the chart menu.

Setting Timeline Chart y-axis Min/Max Values

Timeline charts display information as line charts on an x,y grid. Although, by default y-axis minimum and maximum values are set automatically, they can be set manually so that data from different queries that have different value ranges can be displayed properly on one chart.

To set y-axis minimum/maximum values

1. Navigate to the dashboard you want and find the chart.

2. Click the More (three dots) menu in the upper-right corner of the chart and select Edit.

3. Scroll down to Y-axis settings and do the following:

   • To set a minimum value, toggle Axis miminum and enter a value in the text box.
   • To set a maximum value, toggle Axis maximum and enter a value in the text box.

   Changes are applied immediately and appear in the left pane of the Edit window.

4. Click Save.